Privacy Policy
This Privacy Policy applies to all personal data we collect and use when you visit or use our website, place an order, contact us, or otherwise interact with us. "Personal data" means any information that can be used to identify you, as described in more detail below.
PERSONAL DATA WE COLLECT
We may collect the following categories of personal data:
Contact details: name, address, phone number, email address.
Account and technical data: login details, IP address, browser type, device identifiers, geographic location, pages visited, session duration.
Purchase data: products ordered, order history, delivery address, payment method and status.
Communication data: messages sent to us by email, social media, or customer support.
Marketing preferences: your consent and preferences regarding newsletters and promotions.
Cookies and tracking technologies: further details can be found in our Cookie Policy.
PURPOSE AND LEGAL BASIS FOR PROCESSING
Order processing, payment handling, and customer support: performance of a contract (Art. 6(1)(b) GDPR).
Sending marketing communications: consent (Art. 6(1)(a) GDPR).
Web analytics and service improvement: legitimate interest (Art. 6(1)(f) GDPR).
Fraud prevention and security monitoring: legitimate interest (Art. 6(1)(f) GDPR).
Compliance with legal and tax obligations: legal obligation (Art. 6(1)(c) GDPR).
Our legitimate interests include improving your customer experience, securing our services, and analysing website performance. We have carefully weighed these interests against your data protection rights.
MARKETING COMMUNICATIONS
You will only receive marketing communications from us if you have given your explicit consent. You may unsubscribe at any time by clicking the link included in any email or by contacting us directly.
COOKIES
Our website uses cookies and similar technologies to provide functionality, analyse traffic, and personalise content. Non essential cookies, such as analytics and advertising cookies, are only used after we have obtained your consent through our cookie banner. You can manage your cookie preferences at any time through your browser settings or our cookie settings page.
HOW WE SHARE YOUR DATA
We do not sell your personal data. We may share it with trusted third parties, including:
Service providers, such as hosting, analytics, email and SMS delivery, and customer support tools.
Payment and logistics partners, to process orders and deliver products.
Marketing partners, but only with your consent.
Public authorities, where required by law.
Platform providers, such as our e commerce hosting and email marketing platforms, to the extent necessary to provide our services.
All third parties operate under data processing agreements to ensure GDPR compliant handling of your data.
INTERNATIONAL DATA TRANSFERS
Some of our service providers may be located outside the European Economic Area. In such cases, we ensure the protection of your data by relying on Standard Contractual Clauses approved by the European Commission, or by working with partners certified under appropriate frameworks.
DATA SECURITY
We take appropriate technical and organisational measures to protect your data, including SSL encryption, access controls and authentication, regular audits and vulnerability checks, and secure data storage procedures.
DATA RETENTION
We retain your personal data only for as long as necessary for the purposes described above or to comply with legal obligations:
Order and account information: 10 years, in accordance with German tax and commercial law.
Marketing consent: until you unsubscribe or withdraw your consent.
Customer support interactions: up to 2 years from the last contact.
Analytics and cookies: as set out in our Cookie Policy.
WHO WE ARE
Kerioak is operated by Fire Elephant UG (haftungsbeschränkt), a company registered in Germany. Fire Elephant UG is responsible for the processing of your personal data in accordance with the General Data Protection Regulation (GDPR).
Company details:
Fire Elephant UG (haftungsbeschränkt)
Ganghoferstraße 7
85084 Reichertshofen
Germany
Managing Director: Christian Geisler
Commercial Register: Amtsgericht Ingolstadt, HRB 12721
Email: info@kerioak.com
Phone: +49 151 24605401
YOUR RIGHTS UNDER THE GDPR
You have the following rights regarding your personal data:
Right of access: to obtain a copy of your personal data.
Right to rectification: to correct inaccurate or incomplete data.
Right to erasure: to request deletion of your data.
Right to restriction of processing: to limit how we use your data.
Right to data portability: to receive your data in a usable format.
Right to object: to processing based on legitimate interests or for marketing purposes.
Right to withdraw consent: at any time, regarding marketing or optional data collection.
To exercise your rights, please contact us at info@kerioak.com.
You also have the right to lodge a complaint with your local data protection authority. In Germany, the relevant authority depends on your place of residence; a full list of German data protection authorities is available through the Federal Commissioner for Data Protection and Freedom of Information (BfDI).
CONSUMER DISPUTE RESOLUTION
We are not obliged and not willing to participate in dispute resolution proceedings before a consumer arbitration board.
CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time. Material changes will be announced on our website. Please check this page periodically for updates.